User manual KASPERSKY LAB ANTI-VIRUS 5.6 FOR LINUX MAIL SERVER ADMINISTRATOR GUIDE

[. . . ] KASPERSKY LAB Kaspersky Anti-Virus 5. 6 for Linux Mail Server ADMINISTRATOR'S GUIDE KASPERSKY ANTI-VIRUS 5. 6 FOR LINUX MAIL SERVER Administrator's Guide Kaspersky Lab http://www. kaspersky. com Revision date: November, 2008 Contents CHAPTER 1. INTRODUCTION . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Whats new . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Product requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] If the application was installed into another directory, change this path accordingly. Restart NET-SNMP. 94 Kaspersky Anti-Virus 5. 6 for Linux Mail Server Note: You will find more information about NET-SNMP at http://www. net-snmp. org/. For more information about snmpd. conf and snmp. conf configuration files, please see the corresponding manual pages. The product OIDs are accessible under the following branch: . 1. 3. 6. 1. 4. 1. 23668. 1043 or, in symbolic form: iso. org. dod. internet. private. enterprises. kaspersky. kav4lms This node contains the following groups: onfig ­ application configuration parameters, including groups configuration, divided into sections as in configuration files; statistics ­ statistical information about processed messages, resources in use and detected viruses; update ­ application update information; admin ­ administrative information (application start time, errors etc. ). Warning!To get parameter values for objects in the config. Groups section, use the Walk method instead of Get. The Administrator can also set the application to send SNMP-traps in case of specific events. The SNMPTraps parameter, in the [kav4lms:server. snmp] section of the kav4lms. conf configuration file, determines the events which should trigger the sending of SNMP traps by the application. The possible values are: onfig ­ a SNMP-trap is sent when the configuration or the databases are reloaded (ConfigReloaded trap and BasesReloaded trap); admin ­ a SNMP-trap is sent when the application starts or stops (ProductStart trap, ProductStop trap) or has a fatal error (ProductError trap). Additionally, if the AlertThreshold parameter value is not set to zero, an SNMP-trap will be sent if the percentage of infected messages found during the last hour exceeds the specified value (AlertThreshold). An AlertThreshold trap will be sent every hour since the threshold was exceeded until the percentage of infected messages falls below the defined limit. Advanced settings 95 Note: There is the ConfigReloaded trap corresponding to the application reload. However, the ProductStart, ProductStop and BasesReloaded traps are also sent in this case. This occurs because the watchdog warm-restarts the application. update ­ a SNMP-trap is sent when the application update is performed (UpdateStatus trap) or the anti-virus database is older than five days (ObsoleteBases trap); all ­ SNMP-trap is sent when any of the above described events occurs; none ­ no SNMP-traps are sent. Warning!If you use NET-SNMP master agent, you should start snmptrapd daemon to receive traps. 10. 2. Using the application's setup script Kaspersky Anti-Virus provides a special script, allowing managing the application after it has been installed. The setup script is used as follows: # /opt/kaspersky/kav4lms/bin/kav4lms-setup. sh <option> The available options are: --install-services - register central and filter services with the existing system; --remove-services - unregister started/stopped with the system); all services (will not be --check-services - verify if the applications services are registered; --install-filter=<MTA> - register the specified filter into MTA configuration. Note this also registers it as a service (where applicable); --remove-filter=<MTA> - unregister the filter service from the specified MTA; 96 Kaspersky Anti-Virus 5. 6 for Linux Mail Server --remove-filters - remove all filters that are found active in MTA config(s); --check-filter=<MTA> - verify if the changes for registering with the MTA were done; --filter-options=<options> - sets filter specific options. This option is used only with the ­­install-filter option in order to specify the filter specific parameters. For Sendmail the following options are available: tempfail, reject, pass; --install-cron=<component_name> - install cron job for specified component; --remove-cron=<component_name> - remove cron job for specified component; --check-cron=<component_name> - check if the cron job for component is registered; --user=<user_name> - specify the user name whose credentials will be used to run the central service and application filter. When used together with the ­­install-cron and ­­remove-cron parameters, the option defines the user account, for which a schedule is created. For example: # /opt/kaspersky/kav4lms/bin/kav4lms-setup. sh \ --install-cron=updater --user=root or # /opt/kaspersky/kav4lms/bin/kav4lms-setup. sh \ --install-cron=updater --user=qmailq --add-components-info - add product specific options to applications. setup file; --del-components-info - remove components specific options from application registry; --check-components-info - verify if the product components options are present; --install-webmin-module - add web based administration module to Webmin; --remove-webmin-module - remove the module from Webmin; --check-webmin-module - verify if the Webmin module is installed; Advanced settings 97 --register-key=key-id - register a key by full path, or id relative to licenses directory; --group=<group_name> - specify the group that will be used to run Kaspersky Anti-Virus; the option modifies the Group value in the [options] section of the application configuration file; --switch-credentials=<user_name>[, <group_name>] - specify the user and (if entered) group whose credentials will be used to start the central service and filter of the application. The option modifies the RunAsUser and (if entered) RunAsGroup values in the [kav4lms:server. settings] and [kav4lms:filter. settings] sections of the application configuration file. [. . . ] The Free Software Foundation may publish revised and/or new versions of the General Public License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns. Each version is given a distinguishing version number. If the Program specifies a version number of this License which applies to it and "any later version", you have the option of following the terms and conditions either of that version or of Appendix C 171 any later version published by the Free Software Foundation. [. . . ]